Privacy Policy

Last updated: April 24, 2026

Paxi Studio LLC ("we", "our", or "us") operates the Omiyage mobile application. This Privacy Policy explains how we collect, use, and protect your personal information.

Information We Collect

When you use Omiyage, we collect:

Account Information: Email address, display name, and password (managed securely via Supabase Authentication).
Content: Photos, scanned images, voice memos, and metadata (titles, descriptions, dates, notes, people tags) you choose to save. Images and voice memos are stored in Apple iCloud Documents on your device.
Usage Analytics: We use PostHog to collect app usage data including screen views, feature usage, and interaction events. This data is linked to your account to help us improve the app. Analytics are disabled in development builds.
Device Information: Device type, operating system version, app version, and push notification tokens (for optional notifications).
Crash and Performance Diagnostics: When the app encounters an error or records app performance telemetry, Sentry may collect diagnostics such as stack traces, app state, performance traces, and device context. These reports do not include your photos, scans, voice memos, notes, email address, phone number, or internal memory IDs.
Subscription Data: Your user ID, subscription status, and Apple App Store purchase receipts are shared with RevenueCat to manage billing and renewals. Payment details (credit card numbers) are handled entirely by Apple and are never accessible to us or RevenueCat.

Sign in with Apple. If you sign in using Apple, we receive a stable Apple-issued user identifier and the email address you choose to share (your real address or an Apple-relayed address ending in @privaterelay.appleid.com). If you choose to share your name during first sign-in, we store it as your display name. We never receive your Apple ID password. You can revoke Omiyage's access at any time from your iOS Settings > Apple ID > Sign-In & Security > Sign in with Apple, and we revoke our copy of your authorization automatically when you delete your account in the app.

How We Use Your Information

To provide and maintain the Omiyage service
To store and display your keepsakes securely
To process text extraction (OCR) from your scanned images using on-device processing (Apple Vision) — no images leave your device for this purpose
To send push notifications (with your permission)
To improve the app based on usage analytics
To manage your subscription and billing (via RevenueCat)
To diagnose and fix crashes, performance issues, and bugs (via Sentry)

Data Storage and Security

Your account information and metadata are stored securely using Supabase (hosted on AWS, us-west-1 region). Images and voice memos are stored in Apple iCloud Documents, which syncs across your Apple devices via your personal iCloud account. Omiyage does not store or transmit your images through our servers. You can disable iCloud for Omiyage in your device's iCloud settings, which will store files locally on the device only.

Authentication tokens are stored using your device's secure keychain (iOS Keychain). Other app preferences (notification settings) are stored locally on your device.

Third-Party Services

We use the following third-party services to operate Omiyage:

Supabase (AWS): Database, authentication, and account management. Your account data is stored on AWS servers in the US West region.
Apple Vision (on-device): Optical character recognition (OCR) for text extraction from images — processed entirely on your device, no images are sent to external servers.
Apple iCloud: Image and voice memo storage via iCloud Documents. Data is managed by your personal Apple ID account.
RevenueCat: Subscription management and billing. Your user ID, subscription status, and Apple purchase receipts are shared with RevenueCat to process and manage subscriptions.
PostHog: Product analytics. Collects screen views, feature usage events, and interaction data linked to your user ID (not your email or name) to help us improve the app.
Sentry: Crash reporting, performance monitoring, and diagnostic telemetry. Receives stack traces, performance traces, device type, and app state when errors occur. No personal keepsake content, email addresses, phone numbers, or internal memory IDs are included.
Resend: Transactional email delivery. Your email address and display name are shared with Resend to send account-related emails (subscription confirmations, grace period reminders, and welcome messages).
Expo: Push notification delivery and app update infrastructure. Your push notification token is shared with Expo to deliver notifications.

Data Sharing

We do not sell your personal information. We do not share your content (photos, scans, voice memos, metadata) with third parties. OCR text extraction is performed entirely on your device and your images are never sent to external servers for processing.

Usage analytics and crash/performance diagnostics are shared with our third-party service providers (PostHog and Sentry) solely for the purpose of improving the app.

Cross-App Tracking

We do not track you across other apps or websites. Omiyage does not use advertising identifiers (IDFA) and does not participate in cross-app tracking. We respect Apple's App Tracking Transparency framework.

Your Rights

You can:

Delete individual keepsakes or your entire account from within the app
Export all your memories at full resolution via the Export feature in the app
Opt out of push notifications via your device settings
Request a copy of your data by contacting us at support@omiyageapp.com
Request data correction or deletion by contacting us

Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area or United Kingdom, we process your personal data on the following legal bases:

Contract: To provide the Omiyage service, manage your account, and process subscriptions.
Legitimate Interest: To improve the app through analytics (PostHog) and diagnose issues through crash reporting (Sentry), where these interests are not overridden by your rights.
Consent: To send push notifications and optional communications. You may withdraw consent at any time.

We maintain Data Processing Agreements with all third-party processors (Supabase, PostHog, Sentry, RevenueCat, Resend) as required by GDPR. Your data may be transferred to the United States where our service providers operate; these transfers are protected by Standard Contractual Clauses.

California Privacy Rights (CCPA)

If you are a California resident, you have the right to: (a) know what personal information we collect about you; (b) request deletion of your personal information; (c) opt out of the sale of your personal information. We do not sell your personal information to third parties. To exercise your rights, contact us at support@omiyageapp.com. We will respond within 45 days.

Data Retention

Account and content data: Retained while your account is active. When you delete a keepsake, it is permanently removed immediately.
Account deletion: When you delete your account, all associated data (profile, items, images, voice memos) is deleted immediately from our servers and your device storage.
Analytics data (PostHog): Retained for up to 1 year, then automatically deleted.
Crash reports (Sentry): Retained for 90 days, then automatically deleted.
iCloud data: Managed by your Apple iCloud account. Removed from iCloud when you delete items or your account.

Children's Privacy

Omiyage is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@omiyageapp.com.